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(54) Apparatus for providing a jittered clock signal and for providing random bits 



(57) An apparatus for providing a jittered clock sig- 
nal comprises a reverse-biased diode (1 ). The reversed- 
biased diode (1 ) comprises a leakage current (1 0) which 
decreases a reverse voltage (1 4) on the diode, time-de- 
pendent on a shot-noise of the leakage current. The ap- 
paratus for providing a jittered clock signal further com- 



prises means (3) for periodically increasing the reverse 
voltage of the diode to a value (30), which is above a 
switching value and the apparatus comprises means (5) 
for comparing the reverse voltage of the diode (1 ) to the 
switching value and for outputting a jittered clock signal 
(50) dependent on the comparison. 
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Description 

[0001] The present invention relates to an apparatus 
for providing a jittered clock signal and to an apparatus 
for providing a random bit and, in particular to an appa- 
ratus for providing a jittered clock signal and an appa- 
ratus for providing a random bit, which comprise a diode. 
[0002] The expanding field of digital communication 
requires solutions for securing data which is stored and 
transferred to and from a digital communication system. 
Cryptographic algorithms that reauire a high quality ran- 
dom number source are widely used in communication 
systems and especially in Smart Cards. Random num- 
bers are used forsecret keys, signatures, authentication 
protocols, padding bytes or blinding values. Typically a 
Smart Card micro-controller features a truly random 
number generator among its peripheral devices. Even 
modern motherboards or PCs comprise a security de- 
vice, which includes a random number generator 
[0003] According to the prior art, direct amplification 
of a noise source from a non-deterministic natural 
source, like electronic noise or radioactive decay, jit- 
tered oscillator sampling and discrete-time chaotic 
maps arc widely exploited for generating a random 
stream. Such techniques are often combined in order to 
improve a near-random behaviour of a particular ran- 
dom stream generating technique. 
[0004] The paper "A high-speed oscillator-based truly 
random number generator", M. Bucci, L. Germani, R. 
Luzzi. A. Trifiletti, M. Varanonuovo, IEEE Trans. Com- 
puters Vol. 52. No. 4, pp. 403-409. April 2003 describes 
a truly random number generator which exploits the jit- 
tered oscillator technique, where a sampling oscillator 
is provided with an amplified noise source in order to 
achieve a high jitter to mean period ratio. 
[0005] The paper "A high-speed truly IC random 
number of source for Smart Card microcontrollers", M. 
Bucci. L. Germani, R. Luzzi, P. Tommasino, A. Trifiletti, 
M. Varanonuovo, Proc. 9 th IEEE International Conf. On 
Electronics, Circuits and Systems (ICECS 2002), pp. 
239-242, Sept. 2002 presents a design of a very high- 
speed thermal noise-based mixed-signal random 
number generator, which features a near-random be- 
haviour for clock frequencies up to 80 MHz. The pro- 
posed random number generator is based on an ampli- 
fication of thermal noise from integrated resistors. The 
amplified noise is compared to a reference voltage by a 
clocked comparator whose output is random bit- 
streamed. 

[0006] The noise-based random number generation 
technique is the most popular technique for generating 
a random stream. Nevertheless, the lack of adequate 
shielding from power supply and substrate signals in an 
integrated circuit environment prohibits the exclusive 
use of this method for integrated circuit-based crypto- 
graphic systems. Published random number generator 
designs using ring oscillators report that typical levels 
of oscillator jitter are not nearly sufficient to produce sta- 



tistical randomness. Consequently, pseudo-random 
techniques are added to further randomise the output. 
The same is true for discrete-time chaos systems that 
can be electronically implemented using discrete-time 
5 analogue signal processing techniques. 

[0007] Therefore, the paper "A noise-based IC ran- 
dom number generator for applications in cryptogra- 
phy", C.S. Petrie, J.A. Connelly, IEEE Trans. Circuits 
and Systems- 1, Vol. 47, No. 5, pp. 615-621 , May 2000 
1 o proposes a combination of direct amplification, oscillator 
sampling and discrete-time chaos, for a random number 
generating system. Amplified thermal noise is summed 
into an analogue-digital-based chaotic system that is 
used to drive a current-controlled oscillator. The current- 
*s controlled-oscillator output is assembled at a lower, us- 
er-defined clock frequency using a data flip-flop. Due to 
the combination of three techniques for generating a 
random stream, the architecture is very complex. 
[0008] It is the object of the present invention to pro- 
20 vide a cost-effective, low area and power requiring ap- 
paratus for providing a true deterministic jittered clock 
signal and an apparatus for providing a random bit. 
[0009] This object is achieved by an apparatus for 
providing a digital clock signal according to claim 1 and 
25 an apparatus for providing a random bit according to 
claim 7. 

[0010] The present invention provides an apparatus 
for providing a jittered clock signal, comprising: 



30 



35 



40 



45 



50 



a reverse-biased diode, wherein the diode compris- 
es a leakage current which decreases a reverse 
voltage on the diode, time-dependent on a shot- 
noise of the leakage current; 

means for periodically increasing the reverse volt- 
age of the diode to a value which is above a switch- 
ing value, and 

means for comparing the reverse voltage of the di- 
ode to the switching value and for outputting a clock 
signal dependent on the comparison. 

[0011] The present invention further provides an ap- 
paratus for providing a random bit comprising: 

a first apparatus for providing a first jittered clock 
signal and a second apparatus for providing a sec- 
ond jittered clock signal; and 
means for comparing the first and the second clock 
signal and for outputting a random bit dependent on 
a result of the comparison. 



[0012] The present invention is based on the finding 
that a shot-noise of a leakage current of a reverse-bi- 
55 ased diode can be advantageously used for generating 
a jittered clock signal. 

[0013] According to the inventive arrangement, the 
reverse-biased diode is supplied with an input signal 
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that periodically increases the reverse voltage of the di- 
ode. Due to its characteristic, the apparatus tor provid- 
ing a jittered clock signal generates a jittered output sig- 
nal from the periodic input signal. 
[0014] The paper "Analysis of temporal noise in 
CMOS photodiode active pixel sensor", H. Tian : B. 
Fowler. A. El GamaL IEEE J. Solid-State Circuits, Vol. 
36. No. 1 , pp. 92-1 01 , Jan. 2001 presents an analysis 
of a photodiode shot noise. 

[0015] According to a preferred embodiment of the 
present invention, two apparatus for providing a jittered 
clock signal are combined for providing an apparatus for 
providing a random bit. A true random bit stream is ob- 
tained by comparing the jittered clock signal outputs of 
the first and the second apparatus tor providing a jittered 
clock signal outputting a random bit based on the com- 
parison. 

[0016] The inventive arrangement offers a very low 
power dissipation, a low area requirement in an integrat- 
ed ciicuil and an easy portability within different designs, 
as no analogue circuits are employed. Moreover, a sym- 
metrical layout is possible for the apparatus for providing 
a random bit, thus avoiding a sensibility to deterministic 
disturbances. In an embodiment which comprises a plu- 
rality of jittered clock signals, the high jitter level of the 
jittered clock signals prevents a synchronisation of the 
different jittered clock signals due to power supply and 
substrate couplings. 

[0017] Preferred embodiments of the present inven- 
tion are described hereinafter making reference to the 
appended drawings: 

Fig. 1 shows a schematic view of an apparatus for 
providing a jittered clock signal according to the 
present invention; 

Fig. 2 shows a characteristic decrease of a reverse 
voltage of an apparatus for providing a jittered clock 
signal according to a preferred embodiment of the 
present invention: 

Fig. 3 shows a schematic view of an apparatus for 
providing a random bit according to a preferred em- 
bodiment of the present invention; 

Fig. 4 shows a further embodiment of an apparatus 
for providing a random bit; 

Fig. 5 shows a schematic view of the decrease of a 
reverse voltage of an apparatus for providing a jit- 
tered clock signal; and 

Fig. 6 shows a further embodiment of an apparatus 
for providing an additional random bit. 

[0018] Fig. 1 shows an apparatus for providing a jit- 
tered clock signal according to a preferred embodiment 
of the present invention. The apparatus for providing a 



jittered clock signal comprises a reverse-biased diode 
1 , means 3 for periodically increasing a reverse voltage 
of the diode 1 and means 5 for comparing the reverse 
voltage of the diode 1 to a switching value and for out- 

5 putting a clock signal depending on the comparison. 
[0019] In this embodiment, the diode 1 is a reverse- 
biased P-N junction : like an n/n+ resistance diffused into 
the p-type substrate. The means 3 for periodically in- 
creasing a reverse voltage of the diode 1 is a tri-state 

to buffer and the means 5 for comparing a reverse voltage 
of the diode 1 to a threshold voltage and for outputting 
a clock signal depending on the comparison is a CMOS 
inverter. 

[0020] The depletion region A DIFF of the diode 1 , com- 

is prises a leakage current or dark current J DC 10 due to 
thermally generated minority carriers. A shot noise l DC 
(t) is associated to such a leakage current 1 0. The de- 
pletion region of the reverse biased diode 1 offers a ca- 
pacitance C D | FF 12. The tri-state buffer 3 charges a re- 

20 verse voltage V DlFF (t)14 of the capacitance C DIFF 12 by 
connecting the diode 1 to a supply voltage V DD 30. 
When the tri-state buffer 3 is tri-stated, the capacitance 
C DIFF 12 discharges due to the current l DC 10. During 
the discharge time, the shot noise l DC (t) of the current 

25 'dc 10 is integrated by the capacitance C DIFF 12, thus 
obtaining a variance for the reverse voltage V DIFF (t)14 
which represents a diffusion voltage of the diode 1 . The 
inverter 5 is connected to the depletion region of the di- 
ode 1 and compares the reverse voltage V DiFF (t) 14 to 

30 a threshold voltage Vyn. The inverter 5 outputs an out- 
put signal 50 which depends on the time, it takes the 
reverse voltage V D , FF (t) 14 to decrease from the supply 
voltage V DD 30 to the threshold voltage V^. Thus, a 
switching time of the output signal 50 depends on a ran- 

35 dom variable due to the shot noise l DC (t). 

As the tri-state buffer 3 periodically increases the re- 
verse voltage V DIFF (t) 14, the output signal 50 is a jit- 
tered clock signal 50. 

[0021] Fig. 2 shows characteristic decreases of a dif- 

40 fusion voltage V DIFF (t) 21 4 in an apparatus for providing 
a jittered clock signal as it is shown in Fig. 1 . During the 
time period 236 the diffusion voltage V D | FF (t) 214 de- 
creases due to a leakage current Iqq. Further, Fig. 2 
shows a jittered clock signal 250 as it is outputted from 

45 the apparatus for providing a jittered clock signal. 

[0022] A first characteristic 214a shows an idealized 
decrease of the diffusion voltage V DIFF (t) 214 from the 
supply voltage 230 due to the leakage current l DC if there 
is no shot noise l DC (t). When the diffusion voltage V D | FF 

so (t) 214 decreases to a threshold voltage Vjh 252 the 
output clock signal 250 is switched 254. As a realistic 
leakage current l DC of a diode comprises a shot noise 
l oc (t), realistic characteristics 214b, c : d differ from the 
theoretical characteristic 214a. Thus, the decrease of 

55 the diffusion voltage V DJFF (t) 214 can be faster (214c, 
21 4d) or slower (214b) than the theoretical decrease 
214a. Therefore, the diffusion voltage V D)FF (t) 214 de- 
creases to the threshold voltage 252 not in a fixed 
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time period, but after a time period that includes a ran- 
dom variable. Thus, the switching time 254 of the output 
clock signal 250 depends on the random variable which 
is responsible for the jitter of the output clock signal 250. 
[0023] According to a further embodiment, a variance 
of the switching time 254 is exploited to generate a ran- 
dom bit. Fig. 3 shows a schematic view of an apparatus 
for providing a random bit based on the jittered output 
clock signal of an apparatus for providing a jittered clock 
signal. 

[0024] Fig. 3 shows an apparatus for providing a ran- 
dom bit, which comprises a first apparatus 300a for pro- 
viding a jittered clock signal and a second apparatus 
300b for providing a jittered clock signal. As described 
in Fig. 1 , each apparatus 300a : b comprises a reverse- 
biased diode 301 , a tri-state buffer 303 and an inverter 
305. The diode 301 comprises a leakage current l DC 
310. A supply voltage V DD 330 is applied to the diodes 
301 , while the tri-state buffers 303 are in an active state. 
The tri-state buffers 303 switch according to a periodic 
reset signal 334. Each apparatus for providing a jittered 
clock signal 300a, b outputs an jittered clock signal 
350a, 350b. As described in Fig. 2 each jittered clock 
signal 350a, 350b comprises a random switching char- 
acteristic. Thus, a switching time of the jittered clock sig- 
nals 350a, b varies around a mean switching time. 
[0025] The two jittered clock signals 350a, b are taken 
as an input to a sampling circuit 360. In this embodiment, 
the sampling circuit 360 is a digital flip-flop. The first jit- 
tered clock signal 350a is connected to the data input of 
the digital flip-flop 360 and the second jittered clock sig- 
nal 350b is connected to the clock input of the digital 
flip-flop 360. Thus, the second jittered clock signal 350b 
is used to sample the first jittered clock signal 350a. The 
sampled first jittered clock signal 350a is outputted by 
the digital flip-flop 360 as a random bit 362. 
[0026] The value of the random bit depends on the 
switching times of the jittered clock signals 350a, b. In 
order to generate a true random bit stream 362, the 
mean switching time values of the jittered clock signals 
350a, b have to be aligned. Although the apparatus for 
providing a random bit comprises two nominally-identi- 
cal apparatus 300a, b for providing a jittered clock sig- 
nal, the two mean switching time values are different 
due to matching errors overthe diffusion regions, driver- 
disable times, inverter thresholds, inverter communica- 
tion times and inter-connection delays. In the embodi- 
ment shown in Fig. 3, the mean switching time of the 
first apparatus 300a is smaller than the mean switching 
time of the second apparatus 300b, resulting in an un- 
balanced bit stream of the random bits 362. 
[0027] In order to avoid the time difference 356 of the 
switching times of the two jittered clock signals 350a, b 
which causes an unbalanced bit stream of the random 
bits 362, an alignment of the mean switching times is to 
be controlled by a feedback loop, as it is shown in the 
embodiment of an apparatus for providing a random bit 
in Fig. 4. 



[0028] According to the embodiment shown in Fig. 3, 
the embodiment shown in Fig. 4 comprises a first appa- 
ratus 400a and a second apparatus 400b for providing 
a jittered clock signal which are supplied by a supply 
5 voltage 430 which is controlled by a reset signal 434. A 
first and a second jittered clock signal 450a : b are out- 
putted by the two apparatus 300a, b for providing a jit- 
tered clock signal. 

[0029] The jittered clock signals 450a, b are not di- 
10 rectly connected to a flip-flop 460, which outputs a ran- 
dom bit 462, but to means for aligning a mean switching 
time of the jittered clock signal 450a to a mean switching 
time of the second jittered clock signal 450b. The means 
for aligning comprise means for delaying 470a, b of the 
*5 jittered clock signals 450a, b and a counter 472. The first 
means for delaying 470a is connected to the first jittered 
clock signal 450a and outputs a first delayed clock signal 
474a. The second means for delaying 470b is connect- 
ed to the second jittered clock signal 450b and outputs 
20 a second delayed jittered clock signal 474b. The de- 
layed clock signals 474a s b are connected to the flip-flop 
460. The random bit 462 is outputted by the flip-flop 460 
by way of sampling the first delayed clock signal 474a 
by the second delayed clock signal 474b. The counter 
25 472 is an up/down counterwhich counts an counting val- 
ue up or down depending on the value of the random bit 
462. Therefore, the counter 472 takes the random bit 
462 as an input. The counter 472 is triggered by the sec- 
ond delayed clock signal 474b. Depending on the count- 
30 ing value, the counter 472 sets 476 a delay time of the 
second means for delaying 470b. Furthermore, the sec- 
ond delayed clock signal 474b is used to control the re- 
set signal 434, which controls the state of the tri-state 
buffers of the apparatus 300a, b for providing a jittered 
35 clock signal. 

[0030] Thus, a feedback loop is realized in order to 
align the mean switching times of the first and the sec- 
ond jittered clock signals 350a, b. The first jittered clock 
signal 450a is delayed by the first means for delaying 
*o 470a by a time AT^(T 2 -J A )/2 t whereas the second jit- 
tered clock signal 450b is delayed by the second means 
for delaying 470b by a time delay AT 2 e \T V T 2 ] . The 
time delay AT 2 is a variable delay according to the set- 
ting output 476 of the counter 472. The counter 472 is 
*s used to estimate a mean value of the random bits 362. 
A precision much smaller than the available jitter of the 
jittered clock signals 450a, b is required to adjust the 
delay AT 2 . The exact value of the delay AT 2 is obtained 
from a biasing error that can be tolerated on a mean 
50 value of the random bit 362 stream. 

[0031] Once a random bit 462 has been generated, 
triggered by a rising edge of the second delayed clock 
signal 474b, a new reset pulse on the reset signal 434 
is required to charge again the diffusion capacitances 
55 of the diodes of the first and the second apparatus 400a, 
400b for providing a jittered clock signal. Thus, the sec- 
ond delayed clock signal 474b is used to trigger reset 
pulses on the reset signal 434, thus obtaining a contin- 
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uous operation of the apparatus for providing a random 
bit. 

[0032] Due to the symmetric arrangement of the two 
apparatus 400a, b for providing a jittered clock signal, 
common-mode disturbances do not affect the random 
bit output 462 if a symmetrical layout for the arrange- 
ment and, in particular, an inter-digitated layout for the 
N+ diffusions is used. 

[0033] A further advantage of the feedback loop is a 
compensation of the leakage current values which com- 
prise a variation over process and temperature. 
[0034] Fig. 5 shows a schematic characteristic of the 
diffusion voltage V DIFF (t) 51 4 over a time period 536, as 
it is shown in Fig. 2 Fig. 5 illustrates a jitter around a 
mean switching time of a jittered clock signal of an ap- 
paratus for providing a jittered clock signal. The switch- 
ing time corresponds to a mean integration time which 
is the time, the diffusion voltage V DIFF (t) 514 needs to 
decrease from the supply voltage V DD down to the 
threshold voltage V TH . 

[0035] A data-rate of the random BIT stream, gener- 
ated by an apparatus for providing a random bit is fixed 
by a mean integration time: 



t INTy = l lNT2 ~ l INT ~ 



d) 



'DtFF 



15 



20 



.-3o DtFF 



l INT ' f INT ~ 77 T\7 l ^rr t INT ( 5 ) 

V DD V TH+ V DIFF 

s [0040] However being oV DIFF « V DD -V TH , it follows: 
^7-W=W-^ = ^r (6) 

10 where, 



V D1FF 1 

V DD TH 



(7) 



[0041] From equations (1), (3) and (7), it follows: 



jitter = 3 



DtFF 



'DC 



DD ~ V TH- 



[0042] In the present embodiment, the power supply 
V DD is 1 .2 V, the Inverter threshold V-p^ is 0.8 V, the dif- 
fusion area A DIFF is 1 00 p.m 2 , the depletion capacitance 
25 C DIFF is 0.84fF/u.m 2 and the leakage current l DC is 0 4 
pA/^m 2 . 

[0043] Using the above mentioned values it holds: 



[0036] Since both ; leakage current l DC and capaci- 
tance C DIFF of the depletion region are directly propor- 
tional to a diffusion area A DjFF; which defines the bound- 
ary of the p/n substrate, the voltage difference V DD - V TH 
is the only parameter that can be used to change the 
data-rate of the random BIT stream. 
[0037] For the variance of the diffusion voltage V D , FF 
(t) 514 at the end of the integration time it holds: 



o V, 



Q l DC 



DtFF - ~2— 

D/FF 



l INT 



(2) 



where q=1 .6x1 0 -19 C is the electron charge. 

[0038] Being T^ T » o fW7 -from equation (2) it follows: 



2 _ q'oc z— 

i/mrr = — ^ watt 



G VDIFF 



DiFF 



INT 



(3) 



[0039] As shown in Figure 5, the integration time has 
a non-symmetrical probability distribution and it holds: 



t 3 ° - t 



3o. 



DIFF 



INT " l INT~ V dd -V th -3o Vdif ;<«T 



(4) 



30 



35 



40 



45 



50 



55 



t iNT = 0.84 ms 



jitter = 5,5u.s 



and a data-rate of about 1.2kb/s (t/f^-)is expected. 
[0044] If the obtained data-rate of the apparatus for 
providing a random bit is too low for a target application, 
the high jitter level on the delayed clock signals of the 
embodiment shown in Fig. 4 can be exploited to gener- 
ate additional random bits for each cycle. 
[0045] Such an arrangement for generating more ran- 
dom bits is shown in Fig. 6. The arrangement can be 
arranged in parallel to the flip-flop shown in Fig. 4. The 
arrangement comprises an XOR gate 660, a counter 
664 and an output register 665 for outputting additional 
random bits 666. The XOR gate 660 is connected to a 
first and second delayed clock signal 674a. b. The de- 
layed clock signals 674a, b, which are an input to the 
XOR gate 660 are outputted by the means for delaying, 
as can be seen in Fig. 4. 

[0046] A compared signal 677 is the result of the XOR 
combination of the two delayed clock signals 674a, b. A 
resulting pulse 677' depends on the switching times of 
the delayed clock signals 674a, b and, therefore has a 
random duration. The random duration is quantified by 
the counter 664 which comprises a clock input 678 on 
which a clock is supplied. The counter 664 counts the 
number of clock cycles in which the compared signal 
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677 is active. Triggered by an active value of the com- 
pared signal 677, the output register 665 outputs the ad- 
ditional random bit 666. The value of the random bit 666 
depends on the value of the counter 664. 
[0047] Also, the present invention has been described 
above, making reference to tri-state buffers, p/n diodes 
and inverters, it is clear that the present invention is not 
limited by the shown embodiments. Instead of a tri-state 
buffer, any means for periodically charging the capaci- 
tance of the diode can be used. Instead of the inverter, 
any means can be used which compares the diffusion 
voltage of the diode to a threshold voltage and provides 
a signal that switches accordingly. Moreover, instead of 
the digital flip-flop and the XOR gate, any means can be 
used which provides an output bit depending on a com- 
parison between two jittered clock input signals. 

List of Reference Numbers 



10 



15 



[0048] 



450a 


First jittered clock signal 


450b 


Second jittered clock signal 


460 


Data flip-flop 


462 


Random bit 


470a 


First means for delaying 


470b 


Second means for delaying 


472 


Counter 


474a 


First delayed clock signal 


474b 


Second delayed clock signal 


476 


Set the second delayed time 


514 


Diffusion voltage 


536 


Time period 


660 


XOR gate 


664 


Counter 


665 


Output register 


666 


Addition random bit 


674a, b 


Delayed clock signals 


677 


Compared signals 


678 


Clock 



20 



1 


Diode 




3 


Tri-state buffer 




5 


Inverter 




10 


Leakage current 


25 


12 


Capacitance of the depletion region 




14 


Diffusion voltage 




30 


Supply voltage 




32 


Signal for controlling the tri-state buffer 




50 


Jittered clock signal 


30 


214 


Diffusion voltage 






Supply voltage 




236 


Tri-state time period 




250 


Jittered clock signal 




252 


Threshold voltage 


35 


254 


Switching time 




214a 


First characteristic 




214b ; c.d 


Second, third, fourth characteristics 




300a 


First apparatus for providing a jittered clock 






signal 


40 


300b 


Second apparatus for providing a jittered 
clock signal 




301 


Diodes 




303 


Tri-state buffers 




305 


Inverters 


45 


310 


Leakage currents 




330 


Supply voltage 




334 


Reset signal 




350a, b 


Jittered clock signals 




346 


Time difference of the switching time 


so 


360 


Data flip-flop 




362 


Random bit 




400a 


First apparatus for providing a jittered clock 
signal 




400b 


Second apparatus for providing a jittered 
clock signal 


55 


430 


Supply voltage 




434 


Reset signal 





Claims 

1. Apparatus for providing a jittered clock signal (50; 
250), comprising: 

a reverse-biased diode (1), wherein the diode 
comprises a leakage current (10) which de- 
creases a reverse voltage (14) on the diode, 
time-dependent on a shot-noise of the leakage 
current; 

means (3) for periodically increasing the re- 
verse voltage of the diode to a voltage (30; 230) 
which is above a switching value (252); and 

means (5) for comparing the reverse voltage of 
the diode to the switching value and for output- 
ting a jittered clock signal dependant on the 
comparison. 



2. 



3. 



Apparatus for providing a jittered clock signal ac- 
cording to claim 1 , wherein the means (3) for peri- 
odically increasing the reverse voltage provides an 
input clock signal (32) to the diode (1 ), wherein the 
input clock signal comprises an active state and a 
tri-state state, wherein the active state provides a 
supply voltage (30; 230) with a supply voltage value 
being above the switching value (252), and wherein 
the active state is periodically interrupted by the tri- 
state state for a discharge time period (236) in which 
the reverse voltage (14; 214) of the diode decreas- 
es from the supply voltage value to below the 
switching value. 

Apparatus for providing a jittered clock signal ac- 
cording to one of claims 1 or 2, wherein the means 
for periodically increasing the reverse voltage is 
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connected to the outputted clock signal and the pe- 
riod in which the reverse voltage is increased de- 
pends on the outputted clock signal. 

4. Apparatus for providing a jittered clock signal ac- s 
cording to one of claims 1 to 3, wherein the means 

(3) for periodically increasing the reverse voltage of 
the diode is a tri-state buffer. 

5. Apparatus for providing a jittered clock signal ac- 10 
cording to one of claims 1 to 4, wherein the reverse- 
biased diode (1 ) is a reversed-biased P-N junction. 

6. Apparatus for providing a jittered clock signal ac- 
cording to one of claims 1 to 5, wherein the means is 
(5) for comparing the reverse voltage to the switch- 
ing value and for outputting a jittered clock signal is 

an inverter that is connected to the diode. 

7. Apparatus for providing a random bit comprising: 20 

a first apparatus (300a; 400a) for providing a 
first jittered clock signal (350a; 450a) according 
to one of claims 1 to 6 : and a second apparatus 
(300b, 400b) for providing a second jittered 25 
clock signal (350b; 450b) according to one of 
claims 1 to 6; and 

means (360; 460; 660) for comparing the first 
and the second clock signal and for outputting 30 
a random bit (362. 462) dependent on a result 
of the comparison. 

8. Apparatus for providing a random bit according to 
claim 7, comprising means (470a, 470b, 472) for 35 
aligning a mean switching time of the first jittered 
clock signal (450a) to a mean switching time of the 
second jittered clock signal (450b) and for providing 

a first (474a) and a second (474b) delayed jittered 
clock signal to the means (460) for comparing. 40 

9. Apparatus for providing a random bit according to 
one of claims 7 or 8, wherein the means (360; 460) 
for comparing and for outputting is a D-fiip-flop. 

45 

10. Apparatus for providing a random bit according to 
one of claims 7 to 9, wherein the means (660) for 
comparing further comprises an XOR gate, and 
wherein an additional random bit (666) is provided 
dependent on a time delay (677') between edges of so 
the first (674a) and the second (674b) jittered clock 
signal. 
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